Report - vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=8RYa4ouZ7GuMfdUzskPioP&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=8RYa4ouZ7GuMfdUzskPioP&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=8RYa4ouZ7GuMfdUzskPioP&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click

Report Overview

Visited public
2023-11-28 06:21:32
Tags
URL
vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=8RYa4ouZ7GuMfdUzskPioP&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=8RYa4ouZ7GuMfdUzskPioP&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=8RYa4ouZ7GuMfdUzskPioP&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=8RYa4ouZ7GuMfdUzskPioP&si1=&si2=
Finishing URL
freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
IP / ASN
185.162.87.220
#39572 DataWeb Global Group B.V.
Title
Top european football with N1Bet bonus from Free Betting Reviews

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
e1.o.lencr.org	6159	2020-06-29	2021-08-20 09:36:30	2023-11-27 18:23:14	676 B	1.5 kB	23.33.119.27
freebettingreviews.com	unknown	unknown	No data	No data	8.4 kB	961 kB	172.67.182.143
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-11-27 06:40:38	934 B	290 kB	216.58.211.8
vvewey.com	unknown	2023-08-01	2023-08-01 15:49:38	2023-10-30 08:34:02	626 B	476 B	185.162.87.220
mdakky.com	unknown	2023-10-12	2023-10-13 10:25:55	2023-11-27 06:05:13	565 B	184 B	185.162.85.2
ecrwqu.com	577459	2021-11-09	2021-11-09 21:59:02	2023-11-27 08:32:33	1.0 kB	1.5 kB	185.162.85.1
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-11-27 05:09:30	464 B	1.4 kB	151.101.193.229
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2023-11-27 08:05:54	944 B	63 kB	151.101.194.137
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-11-27 07:34:07	987 B	21 kB	104.17.25.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-28	medium	mdakky.com	Sinkholed
2023-11-28	medium	ecrwqu.com	Sinkholed
2023-11-28	medium	ecrwqu.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	freebettingreviews.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	ScriptElement	12 kB	2023-03-07	2025-05-09
Pretty URL freebettingreviews.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP 172.67.182.143 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 12:21 Times Seen31217 Hash 88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142 Loading...

	unknown	ScriptElement	189 B	2023-11-27	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 17:11 Last Seen2024-08-20 17:42 Times Seen11 Hash 7e3691c63b0e71cc4e24ce7cffed10bc 6a9d74c1821f984ae09060a1e46ddd5274b4420e 7f2a6f02eadbe9f5636f29f26bfc3296cd4e4abd199990a09913deb2649fb524 Loading...

	code.jquery.com/jquery-3.6.1.min.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL code.jquery.com/jquery-3.6.1.min.js IP 151.101.194.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:28 Last Seen2025-05-09 07:15 Times Seen14359 Hash 00727d1d5d9c90f7de826f1a4a9cc632 ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2 a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74 Loading...

	freebettingreviews.com/topfootball_n1bet/js/parallax.js	ScriptElement	516 B	2023-11-27	2024-08-20
Pretty URL freebettingreviews.com/topfootball_n1bet/js/parallax.js IP 172.67.182.143 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 17:11 Last Seen2024-08-20 17:42 Times Seen10 Hash 86922bb97c6ac59ffef25dacc55565ab 576bc6a8a665bb3bb667364401572dfa7a1ba13c f8695eabaf537a3e32d552d950715eaea6412c60830a953e62f5c981b005b4cd Loading...

	www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E	ScriptElement	197 kB	2023-11-28	2023-11-28
Pretty URL www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E IP 216.58.211.8 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-28 07:21 Last Seen2023-11-28 07:21 Times Seen1 Hash c68581a53ccc1fa21feaab771fa902ed b81825e6c0da252157004cc1859da157bbd97ce0 3ad21c117d0fad3135d21963eb6d993a3359765c45a4806f96d032f7ab030082 Loading...

	cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js	ScriptElement	43 kB	2023-03-07	2025-05-09
Pretty URL cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06 Last Seen2025-05-09 07:28 Times Seen22746 Hash d5a61c749e44e47159af8a6579dda121 3b41b3bc956685015a347a2238e71db29dfa0dbb 0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740 Loading...

	unknown	ScriptElement	99 B	2023-11-27	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 17:11 Last Seen2024-08-20 17:42 Times Seen11 Hash 3a0e8016623f8a08190e468a01079d52 aa3d995a94ac9e78f5abef36f60a62823c69d20a 9642704790da2bb9310c8a4627954370fcfc56988995a72f4c19f6de7cb8d55b Loading...

	www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c	ScriptElement	280 kB	2023-11-28	2023-11-28
Pretty URL www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c IP 216.58.211.8 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-28 07:21 Last Seen2023-11-28 07:21 Times Seen2 Hash ba31b20ac9418268727ded1eaadf9b2a c2402f9287ea56d278e6c9e2e85e65ffdfe3f6d3 eb4c023fdc235054c18aa66e964e0c21077aba6360ab60fe2b292e2673bd229f Loading...

HTTP Transactions (29)

URL IP Response Size

vvewey.com/

185.162.87.220

169 B

URL
vvewey.com/
IP
185.162.87.220:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
73d7f0b72c3964636ebb05c137ab75f7
04393cd17cbce199b28d92a49d05c25f3b0e510b
66a4c37663e2e400eda64990fc3119d2519946201310c7f0acb82784e8b60ef1

HTTP Headers

GET / HTTP/1.1
Host: vvewey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.25.0
Date: Tue, 28 Nov 2023 06:21:21 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://vvewey.com/

mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1006906&st=1256027&wd=473677&d=vvewey.com&tpl=80&rnd=0.7360592445028047&sbid=&sbid2=intent%3A%2F%2Fvvewey.com%2Fporno-land

185.162.85.2

0 B

URL
mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1006906&st=1256027&wd=473677&d=vvewey.com&tpl=80&rnd=0.7360592445028047&sbid=&sbid2=intent%3A%2F%2Fvvewey.com%2Fporno-land
IP
185.162.85.2:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rpe?a=1&s=1&act=18&src=2&p=1006906&st=1256027&wd=473677&d=vvewey.com&tpl=80&rnd=0.7360592445028047&sbid=&sbid2=intent%3A%2F%2Fvvewey.com%2Fporno-land HTTP/1.1
Host: mdakky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vvewey.com
DNT: 1
Connection: keep-alive
Referer: https://vvewey.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 06:21:23 GMT
content-length: 0
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
X-Firefox-Spdy: h2

vvewey.com/

185.162.87.220

0 B

URL
vvewey.com/
IP
185.162.87.220:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: vvewey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
server: nginx/1.25.0
date: Tue, 28 Nov 2023 06:21:23 GMT
x-zone: eu3
X-Firefox-Spdy: h2

ecrwqu.com/cuclc?aid=5057284010668213324&t=1701152483&s=1106372

185.162.85.1

223 B

URL
ecrwqu.com/cuclc?aid=5057284010668213324&t=1701152483&s=1106372
IP
185.162.85.1:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size
223 B (223 bytes)
Hash
868305e48401f0372447376af6e98f41
a7c07ca690043901431827bdad3e389307dfb604
d8160ff710c806c8f540a47f8bee7b03480f4f77705d88b04162334c54bc4cbf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cuclc?aid=5057284010668213324&t=1701152483&s=1106372 HTTP/1.1
Host: ecrwqu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvewey.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 28 Nov 2023 06:21:23 GMT
content-type: text/html; charset=utf-8
content-length: 223
location: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.33.119.27

345 B

URL
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
b2795b9ef40a5e884b01970e4c1cf3b4
c6f37283bcf3dcf01999a4ef2b7360d921d1a48f
14bffbc16948f248beb48890f53999d6d523eca7a7ec44216190d1a9187728fb

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "14BFFBC16948F248BEB48890F53999D6D523ECA7A7EC44216190D1A9187728FB"
Last-Modified: Sun, 26 Nov 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17157
Expires: Tue, 28 Nov 2023 11:07:21 GMT
Date: Tue, 28 Nov 2023 06:21:24 GMT
Connection: keep-alive

freebettingreviews.com/topfootball_n1bet/images/visual/cup.webp

172.67.182.143

26 kB

URL
freebettingreviews.com/topfootball_n1bet/images/visual/cup.webp
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image\012- data
Size
26 kB (25682 bytes)
Hash
ddc5c873132a33147c89c04da023da12
7fd7e254e3db90eb30b7a16fcd9ba33c274b3192
091f6f116745c42c26862a21a86d52868c16d6d556c00364194155571f45e2ef

HTTP Headers

GET /topfootball_n1bet/images/visual/cup.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-length: 25682
last-modified: Wed, 22 Nov 2023 08:21:53 GMT
etag: "6452-60ab96961b988"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:56 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W7ZzW7gDfbX4W%2BHw2oacSgV0c3SAQKHKgxTUAZb5CIzEAMXMZCa%2F84%2FKZ2qw9AC%2B6fovsqXNGbdLS8%2B7ELc6Br%2FWeqViBN%2BWEuRhziDligcajC6OrJDOQq0X4W%2FlJGkU%2FEiqhZvdeR2%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bab92f712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/images/visual/kane.webp

172.67.182.143

170 kB

URL
freebettingreviews.com/topfootball_n1bet/images/visual/kane.webp
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image\012- data
Size
170 kB (170164 bytes)
Hash
d357470c15ed33979888c212be60f4e4
0f87696a75d3232e348c890b5e59abc5b9fc4dff
d2601289e0be5282b6811939bc8018551a1fdfcf001f7d788deb69d33d27ebff

HTTP Headers

GET /topfootball_n1bet/images/visual/kane.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-length: 170164
last-modified: Wed, 22 Nov 2023 08:21:54 GMT
etag: "298b4-60ab9696a068a"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:55 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i5%2Fnd9efWOLRT8w%2FiTj%2BlmAIBT3ZJCtj2SnbEH25XxGWAfreKGrZOtUSjliDsZTWxZaD8V6tMr9Ol%2F3JTuh8u4uw3hJZ7YXQ2QfAY95HgrjONbQiOcrqOWirAtAzpd4cd7y3nzf%2Fpe%2Fp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bab92a712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/images/visual/mans.webp

172.67.182.143

133 kB

URL
freebettingreviews.com/topfootball_n1bet/images/visual/mans.webp
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image\012- data
Size
133 kB (132596 bytes)
Hash
33d147562107ff87a23ce7d7858537e5
298b5ea12bf64333150dbde2ec7afe75816cddcc
ce7e9c59fdbacc46773b240251394c74898620f2db0c2764c7b46163cda3d0af

HTTP Headers

GET /topfootball_n1bet/images/visual/mans.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-length: 132596
last-modified: Wed, 22 Nov 2023 08:21:54 GMT
etag: "205f4-60ab9696a356a"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:56 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63789
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RfsGS8wj4%2B3DrSWj9SUNZTt1h2%2BVNrLXoJo%2FW%2FdUAlNZk4ScX5UlDI5Kpf0RLy0YcbXF9LDYGRDAAe2XKEcqA77hOsi1jRWEcQBTUzB2X4eGsEITdbYgo71HWbAUtMQ8rnxDzNcY0sMg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bab92d712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.33.119.57

344 B

URL
e1.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
fd34c4a6f71735288838dc60bcfb2837
e23afde22139efec215c5c3a7aaad6228b050f13
3b5c26b7779c71278344428b254c49c6d5f3a7a47bb6828781b66b75382ca9c5

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "3B5C26B7779C71278344428B254C49C6D5F3A7A47BB6828781B66B75382CA9C5"
Last-Modified: Mon, 27 Nov 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13544
Expires: Tue, 28 Nov 2023 10:07:09 GMT
Date: Tue, 28 Nov 2023 06:21:25 GMT
Connection: keep-alive

cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css

151.101.193.229

200 OK

590 B

URL GET HTTP/2
cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text
Size
590 B (590 bytes)
Hash
f38b2db10e01b1572732a3191d538707
a94a059b3178b4adec09e3281ace2819a30095a4
de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5

HTTP Headers

GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ"
content-encoding: br
accept-ranges: bytes
date: Tue, 28 Nov 2023 06:21:25 GMT
age: 22305679
x-served-by: cache-fra-eddf8230085-FRA, cache-bma1657-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 590
X-Firefox-Spdy: h2

ecrwqu.com/phtbload?a=1&e=aeyJwaWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2Nzd9

185.162.85.20

726 B

URL
ecrwqu.com/phtbload?a=1&e=aeyJwaWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2Nzd9
IP
185.162.85.20:0
ASN
#39572 DataWeb Global Group B.V.

File type
gzip compressed data, from Unix\012- data
Size
726 B (726 bytes)
Hash
d9dd03a3150f418ec8c411d27e8880b5
9172d3250cead3a2f21f6e2632c59c7cbd35b6c3
351873c825f92c44935e2d7512ff838ef7543441072cfce78d4d26d301070d55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /phtbload?a=1&e=aeyJwaWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2Nzd9 HTTP/1.1
Host: ecrwqu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vvewey.com/
Origin: https://vvewey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 06:21:23 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Platform-Version
content-encoding: gzip
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/images/visual/bg.webp

172.67.182.143

57 kB

URL
freebettingreviews.com/topfootball_n1bet/images/visual/bg.webp
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1512, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size
57 kB (56668 bytes)
Hash
1a79247e16d0fff445a05d0f8b1e2621
a38e6cc33beff49fca1d9c8470b5272f47493592
eacf1a38cf26d2f6b36985ff05c9c41d814c90dc61d1d6c3f1fc379f8a3877b2

HTTP Headers

GET /topfootball_n1bet/images/visual/bg.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/css/main.css?3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-length: 56668
last-modified: Wed, 22 Nov 2023 08:21:53 GMT
etag: "dd5c-60ab96961c928"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:59 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63676
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PZNo41%2BZiGK9zHAtTGQBCXLkaZuToc3Y0mv95AagrS%2F0WAXBv%2Bqsh5pNC06d9pPLMhgPO9thpEaF2fDtCj15mLfeUbtenXW3UcOQ7g3t2GuXbasgPqfng%2B8TjLkgEcZEk6lk7%2Ffsyrmw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bcba985687-OSL
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js

172.67.182.143

37 kB

URL
freebettingreviews.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
gzip compressed data, from Unix\012- data
Size
37 kB (36978 bytes)
Hash
9b0564ceb2c99c25ce55789095ea6f0f
66be771a5657c8a85cf85db17dec560eae217b19
0ca412631a1882480f99ade31fe28527ae218e0df0c9b26c3a3bfc0f076c47ea

HTTP Headers

GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: application/javascript
last-modified: Thu, 16 Nov 2023 21:55:48 GMT
etag: W/"65568fe4-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HrdY8k77TWD3mgYEcXZvPgNUd3Qf91Vjbpes72O1%2FBZy0iGV%2FCAZ%2FNsCZlkXpsDJ3oy3L9QFCZewiCnUiwo5sc%2FDzq20rC33G6UvKoM%2BX%2FEE7QEXoh2CYwuCQqnre%2Bjaqi5e2yq5FIcM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bae945712b-OSL
x-frame-options: DENY
expires: Thu, 30 Nov 2023 06:21:25 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2

freebettingreviews.com/fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

172.67.182.143

33 kB

URL
freebettingreviews.com/fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: font/woff2
content-length: 33092
cf-ray: 82d082bcdaab5687-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 63788
cache-control: public, max-age=31536000
expires: Sun, 24 Nov 2024 07:18:49 GMT
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-apo-via: proxy
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8K4TcuTfrDsNewr6BffWEJOKmQadDqms9O8ToqxPwmF6VmhMa%2BDf8SWOFCnJn1xz%2FxrPGMGjvabIRxz4jawOHTxQRZh7FZenEfWdFwg%2FSD42g%2FTDqRGcqV%2BorJmy%2Ffk1hH6fAvtrKYxn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

code.jquery.com/jquery-3.6.1.min.js

151.101.194.137

31 kB

URL
code.jquery.com/jquery-3.6.1.min.js
IP
151.101.194.137:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (65447)
Size
31 kB (30957 bytes)
Hash
00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74

HTTP Headers

GET /jquery-3.6.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15e40"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 06:21:25 GMT
age: 1768972
x-served-by: cache-lga13629-LGA, cache-bma1630-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 44624
x-timer: S1701152486.966740,VS0,VE0
vary: Accept-Encoding
content-length: 30957
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.1.min.js

151.101.194.137

31 kB

URL
code.jquery.com/jquery-3.6.1.min.js
IP
151.101.194.137:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (65447)
Size
31 kB (30957 bytes)
Hash
00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74

HTTP Headers

GET /jquery-3.6.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15e40"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 06:21:26 GMT
age: 1768973
x-served-by: cache-lga13629-LGA, cache-bma1630-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 44625
x-timer: S1701152486.142187,VS0,VE0
vary: Accept-Encoding
content-length: 30957
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js

104.17.25.14

200 OK

9.3 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (42862)
Size
9.3 kB (9283 bytes)
Hash
d5a61c749e44e47159af8a6579dda121
3b41b3bc956685015a347a2238e71db29dfa0dbb
0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740

HTTP Headers

GET /ajax/libs/slick-carousel/1.8.1/slick.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
Alt-Used: 0

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 9283
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-a76f"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 526303
expires: Sun, 17 Nov 2024 06:21:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vYVJ2AT2N%2BAGXop3NvZx7Z2AAZ3qp3f4MQv0LNJEWZ71rP6yIlZTAilwNPxhZIxueVuIlhvQxXnb2gFYJUZUYWOO53rz1RMKufijS6CfNjwcAsPSSuGv1E35crcpSPzgLG2N2Ncy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82d082bdf92b56cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js

104.17.25.14

200 OK

9.3 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (42862)
Size
9.3 kB (9283 bytes)
Hash
d5a61c749e44e47159af8a6579dda121
3b41b3bc956685015a347a2238e71db29dfa0dbb
0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740

HTTP Headers

GET /ajax/libs/slick-carousel/1.8.1/slick.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 9283
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-a76f"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 526303
expires: Sun, 17 Nov 2024 06:21:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YZz3GUyCXFUonLME9%2Ff06QPUIPaQtOKEiWFUjpzPoFfuo5W7wDt92lHGfwnolOhBFjWDl%2FtQ%2B8H4jvm6wPHxDhOiFZ5pFyNvQu0m8ZaWKvPjDyW%2FdE0dC4e8rwvlHI0tvbVPwBZ6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82d082bf49ba56cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Heavy-Italic.ttf

172.67.182.143

49 kB

URL
freebettingreviews.com/topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Heavy-Italic.ttf
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
TrueType Font data, 15 tables, 1st "FFTM", 34 names, Macintosh\012- data
Size
49 kB (49313 bytes)
Hash
ae51e9e282d4990cf6985b638ad43c81
08f2cef0fe59870348887ef176dbd2e7cb3ffe2d
4476d58291a57a2a73b8993e0fb7315a0ab7328d0642c2bc6a0f55b8a8f57d35

HTTP Headers

GET /topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Heavy-Italic.ttf HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/css/main.css?3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: font/ttf
last-modified: Wed, 22 Nov 2023 08:28:49 GMT
etag: W/"20750-60ab98234ebdc-gzip"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:37:37 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63788
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rr5dnMhtt16xrF%2FEC96PndgMso39fMTnSVskgnbdIMiNgYpBpVsYsxZoN8QHL8eFzL2LyV8q3wAi%2B3VVlVtHA26%2FbQR3AzLZQHrgp74DIrb%2FcHwZ0Ale6x%2FJa8zqAUAwU57qjqZSp9rq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bd0ac25687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/images/gamble.svg

172.67.182.143

76 kB

URL
freebettingreviews.com/topfootball_n1bet/images/gamble.svg
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1398)
Size
76 kB (76198 bytes)
Hash
131e2cb5887a310df16ab167cc2b7493
e020e2062928bc9d6897979a829e18eefab8533a
d1e15ca28b2d328f536a4dfa275a0f64c04f018ea838dce538aa0bd2732d6698

HTTP Headers

GET /topfootball_n1bet/images/gamble.svg HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:21:50 GMT
etag: W/"215f-60ab96938f3fa-gzip"
cache-control: max-age=2592000
expires: Wed, 27 Dec 2023 12:10:57 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63788
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CAvMQ5R4uy81jJnek3zJfCj6vrAVj9uQ0Ef5k7PfjK1y0JoEaMWDUjG6q1fpngatLJN8jtEP9vqnzxWTk%2FJC2c6KnCFvMM0ORzGoLe5TCZx9rCnjXwl9AfTDnmoCM5WrE0oz7kfH9H3U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bae944712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c

216.58.211.8

92 kB

URL
www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c
IP
216.58.211.8:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (8089)
Size
92 kB (92244 bytes)
Hash
ba31b20ac9418268727ded1eaadf9b2a
c2402f9287ea56d278e6c9e2e85e65ffdfe3f6d3
eb4c023fdc235054c18aa66e964e0c21077aba6360ab60fe2b292e2673bd229f

HTTP Headers

GET /gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 06:21:26 GMT
expires: Tue, 28 Nov 2023 06:21:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92244
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

freebettingreviews.com/topfootball_n1bet/images/logo-n1bet.svg

172.67.182.143

200 OK

1.5 kB

URL GET HTTP/2
freebettingreviews.com/topfootball_n1bet/images/logo-n1bet.svg
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1601), with no line terminators
Size
1.5 kB (1546 bytes)
Hash
54a82d1d9f23427eabc9028449a2b3b7
a43076ce7fc2c5b58e328e4850abadf2a2d892f2
2006d8bfe8da100fb6a637166750636d1b96696269a64ac0229f92330a7cb8c6

HTTP Headers

GET /topfootball_n1bet/images/logo-n1bet.svg HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:21:51 GMT
etag: W/"60a-60ab9694140fc-gzip"
cache-control: max-age=2592000
expires: Wed, 27 Dec 2023 12:10:56 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j433NEQ7APElxFd2NyYgkfPWUx7OTEjCwvf0eU6Yxv92YLiJbbbWJBWVtfH7kbA5JpcG52oj8DG1Bjcev%2B2hrfspozVL1skffgbN3%2BgaDpA1nH9Iifj3UM%2BEL1uCQq52HmngM67pE6h7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bab930712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/images/logo-n1bet-sm.svg

172.67.182.143

200 OK

1.5 kB

URL GET HTTP/2
freebettingreviews.com/topfootball_n1bet/images/logo-n1bet-sm.svg
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1557), with no line terminators
Size
1.5 kB (1504 bytes)
Hash
306e30aa3adb32719a1ce86af1a19343
ceb6924563c9e7d1a26476bebf089ef22aec273e
b98228a0a8297881068657f1706fee2799a85d179016cb2c7859af31d43e6bed

HTTP Headers

GET /topfootball_n1bet/images/logo-n1bet-sm.svg HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:21:51 GMT
etag: W/"5e0-60ab96940d39c-gzip"
cache-control: max-age=2592000
expires: Wed, 27 Dec 2023 12:10:57 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KC%2BDzu4Xq%2FbFOtdpqf5x48P3HuVxy%2FrlX%2BZJo4AEIAtUJpQGczF1tu7YbPt6BTvVmD0sn%2FR7f%2F3diVV27E7BH2PNFgwj28XWEHK%2BBdpYtx%2FBHdm4%2B2lfKFANSnPQDb9bzZd0KZSEMzar"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bac936712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E

216.58.211.8

200 OK

197 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E
IP
216.58.211.8:443
ASN
#15169 GOOGLE

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
ASCII text, with very long lines (3026)
Size
197 kB (196907 bytes)
Hash
c68581a53ccc1fa21feaab771fa902ed
b81825e6c0da252157004cc1859da157bbd97ce0
3ad21c117d0fad3135d21963eb6d993a3359765c45a4806f96d032f7ab030082

HTTP Headers

GET /gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 06:21:26 GMT
expires: Tue, 28 Nov 2023 06:21:26 GMT
cache-control: private, max-age=900
last-modified: Tue, 28 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72686
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Medium.ttf

172.67.182.143

200 OK

128 kB

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Medium.ttf
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
TrueType Font data, 15 tables, 1st "FFTM", 34 names, Macintosh\012- data
Size
128 kB (127944 bytes)
Hash
e93be7e2124397cc7a632af330654bc0
f10b5b101def4b8ee1694c10ff34522fbe7ee2b9
d729c1ea0bbab2e6fb4a5a885ae990e58ac086a92f66c3a50230e429a086b04d

HTTP Headers

GET /topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Medium.ttf HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/css/main.css?3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: font/ttf
last-modified: Wed, 22 Nov 2023 08:28:51 GMT
etag: W/"1f3c8-60ab9824e2105-gzip"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:37:37 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63787
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WoTdBfPRCHZL6rsaNjvNhnE%2BR4mbKif%2Beh0%2Bn6bJmnNkLVYvftqcQx1v05cyVJSczR8Gc39LXdsdhC98QxxpByNRT%2Bg1Gv%2B5FUMe0gCyqSyVWN7DHk8tniQnw5OkUY4oIOWFYvKyzKbB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bd2ace5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/favicon.ico

172.67.182.143

200 OK

93 kB

URL GET HTTP/3
freebettingreviews.com/favicon.ico
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
MS Windows icon resource - 1 icon, -106x-106, 32 bits/pixel\012- data
Size
93 kB (93062 bytes)
Hash
de5f3d525b014ee3d9b6693bf6c9814f
8b1f09fbead66085bc1b2bd95a15f9b1ebefb802
e15d94ed9124915fc5aec8bcb1ad194d95a070f7225a96e45cebb84df5bd6776

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: image/vnd.microsoft.icon
last-modified: Wed, 08 Mar 2023 18:40:18 GMT
etag: W/"16b86-5f667dc154880"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 11:35:47 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 4752
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iygjvy2oyzK8uC4bezX%2Br82GAujJMmEZRT%2FSLgEkokeXjvTi2Z3fR3OxSowdThXm77PZGaLtPdQSXmIT%2BHx5Y0hbIKP5qwA8if9U4pStdZnY6U%2BYyZQT3aii7Un5u7d9oePzxW1RJC8R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082c23e545687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/images/logo.svg

172.67.182.143

200 OK

11 kB

URL GET HTTP/2
freebettingreviews.com/topfootball_n1bet/images/logo.svg
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1582)
Size
11 kB (10775 bytes)
Hash
21a6c2435bb370926c35226220cc63fc
d72cd9f8382a58abcc9339b160e39e9a576d637a
101e8e4af7d795c84da93b261349154987ba89734d2e55fcf03566b419bf6d5f

HTTP Headers

GET /topfootball_n1bet/images/logo.svg HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:21:51 GMT
etag: W/"2a17-60ab969494f7f-gzip"
cache-control: max-age=2592000
expires: Wed, 27 Dec 2023 12:10:55 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6YRezFVvqxsG4cEU38f%2FEjq0DfCwrz8Con5BJ9aF4e2UcO14AdIq1%2B2y5SjIKeCXFUBzuZtPMAreDMSHDyJKPuJPjNqMqIDLhmSbgE1Zf94QmH%2BF%2FvXTksezvFics2oozc6CqN5x7xGw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bab927712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/js/parallax.js

172.67.182.143

200 OK

516 B

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/js/parallax.js
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
ASCII text, with very long lines (531), with no line terminators
Size
516 B (516 bytes)
Hash
d1e2dd0e3ae038e404991a186059c813
5536007899770cebc3a07868702636ff29631708
6e5c42d975cd35fabb573fbf08f5bac81b55fba306a38d30bd8629c34c920040

HTTP Headers

GET /topfootball_n1bet/js/parallax.js HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=662
etag: W/"296-60ab96981c4b2-gzip"
expires: Wed, 27 Dec 2023 12:10:58 GMT
last-modified: Wed, 22 Nov 2023 08:21:55 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63788
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FiQgv1kutYucT%2Fix4qRd%2BCm87%2BdS1M7dtVSs%2FbSGOUwKqvNkg9NNB9heVQ0Gy%2BVyi0GR2GKFoZ4HCAL%2BQS0MaUszKtWXSR4y9d8PReseHRmFZAbUCXmzKDUTqgVW%2FbxYb%2B0NphzsFyHJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bcba9f5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Heavy.ttf

172.67.182.143

200 OK

132 kB

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Heavy.ttf
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
TrueType Font data, 15 tables, 1st "FFTM", 34 names, Macintosh\012- data
Size
132 kB (131804 bytes)
Hash
7904bf80d8099b206f78524bfd72d586
a51ba0c76680782d6fb0be080c883482cea98107
494d7e6682c3e55339e11aa4ba68312d7413b0ffe84e1bc14142f47ecb4d8929

HTTP Headers

GET /topfootball_n1bet/css/fonts/Druk-Text-Wide-Cyr-Heavy.ttf HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/css/main.css?3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: font/ttf
last-modified: Wed, 22 Nov 2023 08:28:50 GMT
etag: W/"202dc-60ab9823e32df-gzip"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:37:36 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63787
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=keb1TmCY5J%2FEsECHSIc4Pw8VCktSv2kdiij2Awjx5xACkKKbSE%2F%2FO2mEuCv5IbSVYjF4scWoAkLcmE3OrmCGSs%2BU%2BxAjLAv%2BTWgJZCOHAym0vX%2Behjpt7LLtq2bofaNpH6ybWyIcUzMp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bd3ad85687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL